ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA Windows client health check

This page's changes and edits · All guidance changes

Microsoft's edit ·

Update troubleshooting docs for GSA client health checks

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 85881d9 · +9 −9 lines · also on GitHub

⋯ 2 unchanged lines
33 description: Troubleshoot the Global Secure Access client using the Health check tab in the Advanced diagnostics utility.
44 ms.service: global-secure-access
55 ms.topic: troubleshooting
6 −ms.date: 11/17/2025
6 +ms.date: 01/16/2026
77 ms.author: jayrusso
88 author: HULKsmashGithub
99 manager: dougeby
⋯ 153 unchanged lines
163163 1. Run the Health check tests again.
164164
165165 ### DNS over HTTPS not supported
166 −For the Global Secure Access client to acquire network traffic by a fully qualified domain name (FQDN) destination (as opposed to an IP destination), the client needs to read the DNS requests sent by the device to the DNS server. This requirement means that if the forwarding profile contains FQDN rules, you must disable DNS over HTTPS.
166 +For the Global Secure Access client to acquire network traffic by a fully qualified domain name (FQDN) destination (instead of an IP destination), the client needs to read the DNS requests the device sends to the DNS server. This requirement means that if the forwarding profile contains FQDN rules, you must disable DNS over HTTPS.
167167
168168 #### Secure DNS disabled in OS
169169 To disable DNS over HTTPS in Windows, see [Secure DNS Client over HTTPS (DoH)](/windows-server/networking/dns/doh-client-support#configure-the-dns-client-to-support-doh.md).
⋯ 16 unchanged lines
186186 1. Select **Customize and control Google Chrome** and then select **Settings**.
187187 1. Select **Privacy and security**.
188188 1. Select **Security**.
189 −1. In the **Advanced** section, set the **Use secure DNS** toggle to off.
189 +1. In the **Advanced** section, set the **Use secure DNS** toggle to **off**.
190190
191191 ##### Secure DNS disabled in Firefox
192192 To disable DNS over HTTPS in Mozilla Firefox:
⋯ 2 unchanged lines
195195 1. Select **Privacy & Security**.
196196 1. In the **DNS over HTTPS** section, select **Off**.
197197
198 −### DNS Responsive
198 +### DNS responsive
199199 This test checks whether the DNS server configured in Windows returns a DNS response.
200200
201201 If this test fails:
202202 1. Pause the Global Secure Access client.
203 −1. Check if the DNS server configured in Windows is reachable. For example, try resolving "microsoft.com" by using the `nslookup` tool.
203 +1. Check if the DNS server configured in Windows is reachable. For example, try resolving `microsoft.com` by using the `nslookup` tool.
204204 1. Verify that no firewalls block traffic to the DNS server.
205205 1. Configure an alternate DNS server and test again.
206206 1. Resume the Global Secure Access client.
⋯ 15 unchanged lines
222222 1. If the sign-in notification doesn't appear, check if it's in the Notification Center and select **Sign in**.
223223 1. Sign in with a user that is a member of the same Microsoft Entra tenant that the device is joined to.
224224 1. Verify the network connection.
225 −1. Hover over the system tray icon and verify that the client **isn't** disabled by your organization.
225 +1. Hover over the system tray icon and verify that the client *isn't* disabled by your organization.
226226 1. Restart the client and wait for a few seconds.
227227 1. Look for errors in the Event Viewer.
228228
⋯ 104 unchanged lines
333333 ### Disable QUIC in Microsoft Edge
334334 To disable QUIC in Microsoft Edge:
335335 1. Open Microsoft Edge.
336 −1. Paste `edge://flags/#enable-quic` in the Address bar.
336 +1. Paste `edge://flags/#enable-quic` in the address bar.
337337 1. Set the **Experimental QUIC protocol** drop-down to **Disabled**.
338338
339339 ### Disable QUIC in Chrome
340340 To disable QUIC in Google Chrome:
341341 1. Open Google Chrome.
342 −1. Paste `chrome://flags/#enable-quic` in the Address bar.
342 +1. Paste `chrome://flags/#enable-quic` in the address bar.
343343 1. Set the **Experimental QUIC protocol** drop-down to **Disabled**.
344344
345345 ### Disable QUIC in Mozilla Firefox
346346 To disable QUIC in Mozilla Firefox:
347347 1. Open Firefox.
348 −1. Paste `about:config` in the Address bar.
348 +1. Paste `about:config` in the address bar.
349349 1. In the **Search preference name field**, paste `network.http.http3.enable`.
350350 1. Toggle the **network.http.http3.enable** option to **false**.
351351
⋯ 3 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:31 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.